-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| pillow | pip | >= 9.2.0, < 9.3.0 | 9.3.0 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from missing validation of the SAMPLESPERPIXEL TIFF tag in the image decoding setup process. The GitHub patch adds a check against MAX_SAMPLESPERPIXEL in TiffImagePlugin.py's _setup method, confirming this was the vulnerable area. The function's role in parsing TIFF metadata and preparing decoding context matches the vulnerability description's technical details.